This chapter provides information about how to protect your computer from theft and unauthorized use.
Security features
The following security features are available on your computer:
• Computrace Agent software embedded in firmware
The Computrace Agent software is an IT asset management and computer theft recovery solution.
The software detects if changes have been made on the computer, such as hardware, software, or the computer call-in location.
Note: You might have to purchase a subscription to activate the Computrace Agent software.
• Ability to enable and disable devices and USB connectors
For more information, see “Enabling or disabling a device” on page 45.
• Integrated fingerprint reader (available on some models)
Depending on the models of your computer, the keyboard may have an integrated fingerprint reader.
By enrolling your fingerprint and associating it with a Power-on Password, a Hard Disk Password, or both passwords beforehand, you can start the computer, log on to the system, and enter the Setup Utility program by swiping your finger over the reader, without typing a password. Thus fingerprint authentication can replace passwords and enable simple and secure user access.
• Startup sequence control
For more information, see “Selecting or changing the startup device sequence” on page 45.
• Startup without keyboard or mouse
Your computer is able to log in to the operating system without keyboard or mouse connected.
© Copyright Lenovo 2012 25
Attaching an integrated cable lock
An integrated cable lock, sometimes referred to as the Kensington lock, can be used to secure your computer to a desk, table, or other non-permanent fixture. The cable lock attaches to the integrated cable lock slot at the rear of your computer and is operated with a key. The cable lock also locks the buttons used to open the computer cover. This is the same type of lock used with many notebook computers. You can order an integrated cable lock directly from Lenovo by searching for Kensington at:
http://www.lenovo.com/support
Figure 5. Integrated cable lock
Using passwords
You can set a variety of passwords through the Microsoft Windows operating system and through the BIOS of your computer to help deter unauthorized use of your computer.
BIOS passwords
You can use the BIOS Setup Utility program to set passwords to prevent unauthorized access to your computer and data. The following types of passwords are available:
• Power-On Password: When a Power-On Password is set, you are prompted to type a valid password each time the computer is turned on. The computer cannot be used until the valid password is typed in. For more information, see “Power-On Password” on page 44.
• Hard Disk Password: Setting a Hard Disk Password prevents unauthorized access to the data on the hard disk drive. When a Hard Disk Password is set, you are prompted to type a valid password each time you try to access the hard disk drive. For more information, see “Hard Disk Password” on page 44.
• Administrator Password: Setting an Administrator Password deters unauthorized users from changing configuration settings. If you are responsible for maintaining the configuration settings of several computers, you might want to set an Administrator Password. For more information, see “Administrator Password” on page 44.
You do not have to set any passwords to use your computer. However, using passwords improves computing security.
Windows passwords
Depending on your version of the Windows operating system, you can use passwords for a variety of features, including controlling login access, access to shared resources, network access, and individual user settings. For more information, see “Help and Support” on page 71.
Configuring the fingerprint reader
If your keyboard has a fingerprint reader, you can set the fingerprint reader in the Setup Utility program.
The Fingerprint Setup submenu under the Security menu of the Setup Utility program provides the following options:
• Preboot Authentication: enables or disables the fingerprint reader function for entering BIOS password.
• Erase Fingerprint Data: clears the fingerprint data stored in a fingerprint reader.
To set an item on the Fingerprint Setup submenu, do the following:
1. Start the Setup Utility program. See “Starting the Setup Utility program” on page 43.
2. From the Setup Utility program main menu, select Security ➙ Fingerprint Setup, and press Enter.
The Fingerprint Setup window opens.
3. Select Preboot Authentication or Erase Fingerprint Date as desired, and press Enter.
4. Select the desired settings and press Enter.
5. Press F10 to save and exit the Setup Utility program. Press Enter when prompted to confirm the exit.
Using and understanding firewalls
A firewall can be hardware, software, or a combination of both depending on the level of security required.
Firewalls work on a set of rules to determine which inbound and outbound connections are authorized. If your computer is preintalled with a firewall program, it helps protect against computer Internet security threats, unauthorized access, intrusions, and Internet attacks. It also protects your privacy. For more information about how to use the firewall program, refer to the help system of your firewall program.
The Windows operating system preinstalled on your computer provides the Windows Firewall. For details on using the Windows Firewall, refer to “Help and Support” on page 71.
Protecting data against viruses
Your computer is preinstalled with an antivirus program to help you guard against, detect, and eliminate viruses.
Lenovo provides a full version of antivirus software on your computer with a free 30-day subscription. After 30 days, you must renew the license to continue receiving the antivirus software updates.
Note: Virus definition files must be kept up-to-date to guard against new viruses.
Chapter 4. Security 27
For more information about how to use your antivirus software, refer to the help system of your antivirus software.